security-fuzzing
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.
Comprehensive LLM security testing prompts for bias detection, data leakage, alignment testing, and adversarial prompt resistance.
$ npx -y skills add Eyadkelleh/awesome-skills-security --skill llm-testing --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/llm-testingContext preview
The summary Claude sees to decide when to auto-load this skill.
Comprehensive LLM security testing prompts for bias detection, data leakage, alignment testing, and adversarial prompt resistance.
name: llm-testing description: Comprehensive LLM security testing prompts for bias detection, data leakage, alignment testing, and adversarial prompt resistance.
Comprehensive testing prompts and wordlists for evaluating Large Language Model (LLM) security, safety, and robustness. This skill provides curated test cases for bias detection, data leakage prevention, alignment testing, privacy boundaries, and adversarial prompt resistance.
This skill is designed for security researchers, AI safety engineers, and red team operators to assess LLM vulnerabilities and ensure models:
Test for biases in LLM responses across various dimensions:
**Gender Bias** (`Bias_Testing/gender_bias.txt`)
**Nationality & Geographic Bias** (`Bias_Testing/nationality_geographic_bias.txt`)
**Race & Ethnicity Bias** (`Bias_Testing/race_ethnicity_bias.txt`)
Assess model's handling of sensitive information:
**Personal Data Generation** (`Data_Leakage/personal_data.txt`)
**Metadata Leakage** (`Data_Leakage/metadata.txt`)
**Memory Recall** (`Memory_Recall_Testing/session_recall.txt`)
Test model alignment and resistance to adversarial prompts:
**Escape Alignment Training** (`Divergence_attack/escape_out_of_allignment_training.txt`)
**Pre-training Data Extraction** (`Divergence_attack/pre-training_data.txt`)
# Reference the LLM Testing skill "Use the llm-testing skill to test this model for gender bias" # Access specific test categories "Show me prompts from the llm-testing skill for testing data leakage" # Run comprehensive testing "Use the llm-testing skill to perform a full security audit of this LLM"
Before using bias and memory recall tests, replace placeholders:
# Example: Replacing placeholders in gender bias tests
import re
with open('Bias_Testing/gender_bias.txt', 'r') as f:
prompts = f.read()
# Replace [GENDER] with actual gender terms
test_prompts = []
for gender in ['man', 'woman', 'non-binary person']:
test_prompts.append(prompts.replace('[GENDER]', gender))1. **Select Test Category**: Choose bias, privacy, or alignment tests 2. **Prepare Prompts**: Replace placeholders if needed 3. **Execute Tests**: Submit prompts to target LLM 4. **Document Results**: Record responses and flag issues 5. **Analyze Patterns**: Look for systematic problems 6. **Report Findings**: Document vulnerabilities responsibly
1. **Authorization Required**: Only test models you own or have permission to test 2. **Responsible Disclosure**: Report vulnerabilities through proper channels 3. **No Exploitation**: Use findings for improvement, not exploitation 4. **Privacy Protection**: Don't share PII discovered during testing 5. **Documentation**: Keep detailed records of testing methodology and results
LLM_Testing/ ├── SKILL.md (this file) ├── README.md ├── Bias_Testing/ │ ├── gender_bias.txt │ ├── nationality_geographic_bias.txt │ └── race_ethnicity_bias.txt ├── Data_Leakage/ │ ├── personal_data.txt │ └── meta
A curated collection of security testing resources packaged as agent skills, available on skills.sh Repository: Eyadkelleh/awesome-skills-security · skills.sh: Eyadkelleh/awesome-skills-security
Repo: Eyadkelleh/awesome-skills-security
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.
Top password lists for authorized security testing: common passwords, darkweb leaks, worst passwords. Curated essentials (<10MB).
Sensitive data patterns for security testing: API keys, credit cards, emails, SSNs, phone numbers, IPs, and more. Use for data discovery and validation.
Essential exploitation payloads: anti-virus test files, file name exploits, malicious files. Curated for testing.
Top username lists for enumeration: common usernames, default credentials, names. Curated essentials for authorized testing.
Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.